This section describes the display commands that are used for displaying basic system configurations.
3.1 Basic Configuration Introduction
This section describes the meaning and scope of the basic configuration.
Before configuring services, users often need to perform basic configurations for actual operation and maintenance.
The ATN 910 provides configurations of two kinds of basic environments:
l Basic system environment: includes the language mode, host name, system name, system time, header text, and command level for actual environment.
l Basic user environment: includes password for changing levels and the terminal lock.
3.2 Configuring the Basic System Environment
This section describes how to configure the basic system environment according to user habits or the requirements of the actual environment.
3.2.1 Establishing the Configuration Task
Before configuring the basic system environment, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the required data. This can help you complete the configuration task quickly and accurately.
Applicable Environment
Before configuring the services, you need to configure the basic system environments to meet the requirements of the actual environments.
By default, the ATN 910 supports commands of Level 0 to Level 3, namely, visit level, monitoring level, configuration level, and management level.
If the user needs to define more levels, or refine management privileges on the device, the user can extend the range of command line level from the range of Level 0 to Level 3 to the range of Level 0 to Level 15.
Pre-configuration Tasks
Before configuring basic system environment, complete the following task:
l Powering on the ATN equipment
Data Preparation
To configure basic system environment, you need the following data.
No. Data
1 Language mode 2 System time
No. Data
3 Host name
4 Login information 5 Command level
3.2.2 Switching the Language Mode
You can switch between the Chinese mode and the English mode as required.
Context
Do as follows on the ATN equipment:
Procedure
Step 1 Run:
language-mode language-name
The language mode is switched.
By default, the English mode is used.
The help information on the ATN equipment can be in English and in Chinese. The language mode is stored in the system software and need not be loaded.
----End
3.2.3 Configuring the Equipment Name
You can change the equipment name as required. The new equipment name takes effect immediately.
Context
Do as follows on the ATN equipment:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
sysname host-name
The equipment name is set.
You can change the name of the ATN equipment that appears in the command prompt.
By default, the host name of the ATN equipment is HUAWEI.
----End
3.2.4 Setting the System Clock
To ensure that devices on the network work with the same clock, you need to set or change the system clock.
Context
You need to set the system time properly to ensure the cooperation between the ATN 910 and other devices. The ATN 910 supports the configurations of the time zone and the daylight saving time.
NOTE
UTC indicates the Universal Time Coordinated.
Do as follows on the ATN equipment:
Procedure
Step 1 Run:
clock datetime [ utc ] HH:MM:SS YYYY-MM-DD
The current date and time is set.
Step 2 Run:
clock timezone time-zone-name { add | minus } offset
The time zone is set.
l If add is configured, the current time is the UTC time plus the time offset. That is, the default UTC time plus offset is equal to the time of time-zone-name.
l If minus is configured, the current time is the UTC time minus the time offset. That is, the default UTC time minus offset is equal to the time of time-zone-name.
Step 3 Run:
clock daylight-saving-time time-zone-name one-year start-time start-date end-time end-date offset
or
clock daylight-saving-time time-zone-name repeating start-time { { first | second
| third | fourth | last } weekday month | start-date } end-time { { first | second | third | fourth | last } weekday month | end-date } offset [ start-year [ end-year ] ]
The daylight saving time is set.
During the configuration of the daylight saving time, you can configure the start time and end time in one of the following modes: date+date, week+week, date+week, and week+date. For details, see clock daylight-saving-time.
NOTE
When the current time is within the daylight saving time, running the clock timezone time-zone-name { add | minus } offset command can successfully set the time zone name. If the display clock command is run to view the time zone name at the moment, the time zone name, however, is displayed as the name of the daylight saving time. After the daylight saving time ends, the set time zone name can be displayed.
CAUTION
When the device is upgraded from an earlier version to the V200R001C01 version, the configured daylight saving time does not take effect and needs to be reconfigured.
----End
3.2.5 Configuring a Header
If you need to provide information for login users, you can configure a header that the system displays during login or after login.
Context
Do as follows on the ATN equipment:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
header login { information text | file file-name }
The header displayed during login is set.
Step 3 Run:
header shell { information text | file file-name }
The header displayed after login is set.
A header is a system prompt displayed when a user logs in to the ATN equipment or starts interactive configuration with the ATN equipment. The header provides detailed instruction.
NOTE
l If a user logs in to the ATN equipment by using SSH1.X, the login header is not displayed during login, but the shell header is displayed after login.
l If a user logs in to the ATN equipment by using SSH2.0, both login and shell headers are displayed.
----End
3.2.6 Configuring Command Levels
By default, commands are registered in the sequence of Level 0 to Level 3. If refined rights management is required, you can divide commands in to 16 levels, that is, from Level 0 to Level 15.
Context
If the user does not adjust a command level separately, after the command level is updated, all originally-registered command lines adjust automatically according to the following rules:
l The commands of Level 0 and Level 1 remain unchanged.
l The command Level 2 is updated to Level 10 and Level 3 is updated to Level 15.
l No command lines exist in Level 2 to Level 9 and Level 11 to Level 14. The user can adjust the command lines to these levels separately to refine the management of privilege.
NOTE
The updation of command Level 2 to Level 10 and Level 3 to Level 15 is not a two-step process but one-step by batch.
Do as follows on the ATN equipment:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
command-privilege level rearrange
Update the command level in batch.
When no password is configured for a Level 15 user, the system prompts the user to set a super-password for the level 15 user. At the same time, the system asks if the user wants to continue to update the command line level. Then, just select "N" to set a password. If you select "Y", the command level can be updated in batch directly. This results in the user not logging in through the Console port and failing to update the level.
Step 3 Run:
command-privilege level level view view-name command-key
The command level is configured. With the command, you can specify the level and view multiple commands at one time (command-key).
All commands have default command views and levels. You need not reconfigure them.
----End
3.2.7 Configuring the Undo Command to Match in the Previous View Automatically
You can run the undo command in the current view and thus the system automatically matches the previous view.
Context
If the user allows the undo command to automatically match the previous view and the user runs the undo command that is not registered in the current view, the system searches the undo command in the previous view.
The undo command has disadvantages due to automatically matching. For example, when the user runs the undo ospf command in the interface view where the command is not registered, the system searches in system view automatically. This may lead to global deletion of the OSPF feature.
NOTE
l By default, the undo command does not automatically match the upper level view.
l The matched upper-view command is valid for current login users who run this command.
l It is not recommended that you configure the undo command to automatically match the upper level view, unless necessary.
Do as follows on the ATN equipment:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
matched upper-view
The undo command is configured to match the upper level view.
By default, the undo command does not match the previous view automatically.
----End
3.3 Configuring Basic User Environment
This section describes the configuration of the basic user environment for user level switching.
3.3.1 Establishing the Configuration Task
Before configuring the basic user environment, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the required data. This can help you complete the configuration task quickly and accurately.
Applicable Environment
The user can log in to a ATN equipment with lower level to perform simple configurations or view configurations. When the configuration is complicated, the user needs to switch to a high level. Thus, it requires the user to configure the basic environment for switching levels.
Pre-configuration Tasks
Before configuring the basic environment for the user, complete the following task:
l Powering on the ATN equipment properly
Data Preparation
To configure the basic environment for the user, you need the following data:
No. Data
1 Password for the user level switching
3.3.2 Configuring the Password for Switching User Levels
Passwords need to be set for users that are switched from lower levels to higher levels.
Context
When users log in to the ATN equipment with a lower user level, they switch to a higher user level to perform advanced operations by entering the corresponding password. The password needs to be configured in advance.
CAUTION
When simple is used, the password is saved in the configuration files in simple text. Login users with lower level can obtain the password by viewing the configuration. This may cause security problems. Therefore, cipher is used to save the password in encrypted text.
If the pass word is set in cipher mode, the password cannot be resumed from the system. Save the password to avoid oblivion or miss.
Do as follows on the ATN equipment:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
super password [ level user-level ] { simple | cipher } password
The password for switching user levels is configured.
----End
3.3.3 Switching User Levels
You need to enter the set password when being switched from a lower level to a higher level.
Context
An accurate password must be entered when the user is switched from a lower level to a higher level.
When configuring the switchover of user levels on the ATN equipment, users can perform HWTACACS Authentication. For detailed configurations, refer to the ATN 910 ATN equipment Configuration Guide - Security.
Do as follows on the ATN equipment:
Procedure
Step 1 Run:
super [ level ]
User levels are switched.
Step 2 Follow the prompt and enter a password.
If the password entered is correct, the user can switch to a higher level. If the user enters a password incorrectly for three consecutive times, the user remains at the current login level and returns to the user view.
NOTE
When the login user of lower level is switched to the user of higher level through the super command, the system automatically sends trap messages and records the switchover in a log. When the switched level is lower than that of the current level, the system only records the switchover in a log.
----End
3.3.4 Locking User Interfaces
You can enter the set password to unlock the locked user interface.
Context
When you leave the operation terminals for a moment, you can lock the user interface to prevent unauthorized users from operating the interface.
Do as follows on the ATN equipment:
Procedure
Step 1 Run:
lock
The user interface is locked.
Step 2 Follow the system prompt and input an unlock password, and then confirm.
<HUAWEI> lock Enter Password:
Confirm Password:
If the locking is successful, the system prompts that the user interface is locked.
You must enter a correct password to unlock the user interface.
----End
3.4 Displaying System Status Messages
This section describes the display commands that are used for displaying basic system configurations.
Context
You can use the display commands to collect information about the system status. The display commands are classified according to the following functions:
l Displays system configurations.
l Displays the running status of the system.
l Displays the diagnostic information about a system.
l Displays the restart information about the main control board.
See the related sections for display commands for protocols and interfaces. The following only shows the system display commands.
Run the following commands in any view.
3.4.1 Displaying System Configuration
You can view information about the system version, system time, original configuration, and current configuration.
Prerequisites
Basic Configuration are complete.
Procedure
l Run the display version command to display the system version.
l Run the display clock [ utc ] command to display the system time.
l Run the display calendar command to display system calendar.
l Run the display saved-configuration command to display the original configuration.
l Run the display current-configuration command to display the current configuration.
----End
3.4.2 Displaying System Status
You can view the configuration of the current view.
Prerequisites
Basic configuration are complete.
Procedure
l Run the display this command to display the configuration of the current view.
----End
3.4.3 Collecting System Diagnostic Information
You can view the system diagnosis information.
Context
Basic configuration is complete.
Procedure
Step 1 Run:
display diagnostic-information [ file-name ]
The system diagnosis information is displayed.
When the system fails or performs the routine maintenance, you need to collect a lot of information to locate faults. Then, you have to run different display commands to collect all information. In this case, you can use the display diagnostic-information command to collect all information about the current running modules in the system.
The display diagnostic-information command collects all information collected by running the following commands, including display clock, display version, display cpu-usage, display interface, display current-configuration, display saved-configuration, display history-command, and so on.
----End
4 User Management
About This Chapter
This chapter describes user interfaces and the configuration of users' login.